Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
File:                     BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft (raw, json)
Hash identifier:          bAFmLoGtAr54jjzyXSNxlsZWFACKI8QYEglWw9dxo/o=
Subject key identifier:   F4:2D:45:49:C1:AB:54:FE:A7:D6:FD:34:AA:DC:04:C0:7A:A9:6B:B3
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Certificate issuer:       /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial:       4701F5DDC1071B9D7A809C781E980D6452230600
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
Manifest number:          0352
Signing time:             Mon 20 Oct 2025 11:10:00 +0000
Manifest this update:     Mon 20 Oct 2025 11:05:00 +0000
Manifest next update:     Tue 21 Oct 2025 11:10:00 +0000
Files and hashes:         1: 3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (hash: LSPvF/yPwqYM389vmOVbK55ZQ+kVjTiieioX5ncwkIE=)
                          2: BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl (hash: EutCR/WnwE1ohrvEO74Wv0Db92DdUcZfGdhW+ct3w/U=)
                          3: 323830343a373964343a3a2f33322d3336203d3e20323731333330.roa (hash: O7OKqbtQ0TyZq5COvHRvntx3Ce6+68TCpDpbUQYWbLY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
                          rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:01:f5:dd:c1:07:1b:9d:7a:80:9c:78:1e:98:0d:64:52:23:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Validity
            Not Before: Oct 20 11:05:00 2025 GMT
            Not After : Oct 21 11:10:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:d0:34:2b:9f:4a:75:58:ae:29:59:7c:a9:
                    5b:85:42:66:8a:f6:ac:c9:d5:a4:c1:bf:8d:f4:66:
                    fa:1c:10:e8:96:f8:64:9b:dd:50:a0:18:50:f7:ed:
                    b2:b3:bb:e9:4a:87:2e:55:88:4d:ad:32:4e:00:7b:
                    cd:91:8d:2c:5a:a7:fa:9d:5d:d6:bf:0e:7c:17:38:
                    9c:6f:a2:d8:a5:f3:01:3d:10:fa:e8:1c:36:cb:c1:
                    60:c6:6c:46:d2:e1:1b:e2:76:85:f5:c9:81:46:95:
                    84:a2:66:96:6c:7c:b3:86:b1:c5:6d:dd:df:e1:e3:
                    4a:2f:af:82:8c:f4:ed:8c:a6:c0:85:6b:4e:f0:bf:
                    3b:5b:42:0b:87:5e:d2:a1:3c:7a:5d:25:98:b1:64:
                    99:9e:97:b3:03:fe:df:e8:e3:af:61:5f:6d:e6:fe:
                    ea:9f:2d:9d:f4:66:58:ad:98:92:66:5c:28:fc:53:
                    5a:04:13:1a:ec:7b:02:24:8c:73:14:c6:73:37:bb:
                    af:78:e0:8f:d2:c6:2f:c4:00:40:28:cf:cb:44:5d:
                    a3:2f:2c:25:e0:51:23:5b:9f:f4:0f:df:0c:af:23:
                    d3:a0:c1:f1:c2:14:a7:68:7b:8b:7c:91:5e:17:d7:
                    98:42:85:1f:12:19:5b:ca:eb:65:8a:76:df:74:62:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2D:45:49:C1:AB:54:FE:A7:D6:FD:34:AA:DC:04:C0:7A:A9:6B:B3
            X509v3 Authority Key Identifier:
                keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:db:3b:fc:94:be:07:2c:a6:02:8f:8b:fa:73:3b:b1:15:
         c0:3e:b0:da:f6:43:da:fa:78:21:83:d8:ed:e9:49:fc:ea:99:
         d4:37:22:78:23:86:6a:6f:3e:07:f2:41:03:dd:e9:2a:c0:00:
         84:7f:62:8c:59:e7:db:5d:40:08:bd:b8:08:4a:2a:e1:4d:7a:
         02:34:91:1b:71:25:86:65:4b:3f:97:e9:06:33:66:7a:88:fe:
         e9:70:b2:51:2f:e3:a6:3b:f7:38:9c:05:c3:c3:81:aa:98:2b:
         18:ed:45:d4:5f:f9:2f:de:2a:ec:65:7f:57:1d:3d:6d:d3:35:
         b8:b0:3c:ab:d3:98:b7:56:cb:8c:90:54:93:b2:d3:cd:13:60:
         e4:1e:46:9d:49:ca:58:cb:99:db:90:7b:e8:df:22:f1:55:86:
         c1:70:0a:af:3a:43:e5:6e:5e:bd:33:77:44:7a:f3:01:be:05:
         26:e4:24:46:84:df:a1:65:2d:b4:2c:54:35:33:df:0c:d7:bb:
         7f:67:1d:48:44:8b:e7:62:6c:03:34:b7:3a:28:db:39:cc:a9:
         83:8a:72:e9:e5:95:f9:2b:83:b4:0f:1f:3b:b3:a1:6a:16:5f:
         cf:e4:c6:21:ee:42:4f:4c:96:f3:72:4f:18:44:7d:8b:bf:df:
         3f:09:88:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:13:45 2025 by rpki-client